Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3a58a272-1567-32bf-93ef-107d75898430.roa
File:                     3a58a272-1567-32bf-93ef-107d75898430.roa (raw, json)
Hash identifier:          NiTJpJUKD/hXA682gZAuVg47c2bti0SdQeIdbszp4a0=
Subject key identifier:   B6:DF:C4:5C:31:70:8A:F5:08:68:1D:54:B4:6A:16:48:08:ED:B7:B8
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849D1650AC1802678E3FFEFEC20
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3a58a272-1567-32bf-93ef-107d75898430.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     18586
IP address blocks:        64.125.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:0a:c1:80:26:78:e3:ff:ef:ec:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=958728ab-2d5c-46e7-86c8-aeec500422ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:89:36:c3:51:01:33:f6:9b:04:ff:3e:7e:d2:
                    48:51:79:43:11:3f:08:ef:c2:15:ed:3c:1e:c1:28:
                    4a:48:f7:57:b2:64:f6:de:3c:5d:d2:1c:8d:e3:e0:
                    5a:97:0d:e9:3f:bb:ad:5b:e3:37:f7:f3:b7:9f:f5:
                    03:f5:90:bb:7a:45:48:2f:a5:25:b1:1d:34:52:3e:
                    16:ce:e6:25:73:52:dc:9e:07:91:fb:d0:e6:bd:e4:
                    70:a4:44:74:27:8d:ac:e5:54:ea:b1:7c:80:4a:a1:
                    3c:27:d7:0b:90:53:2b:3a:88:f0:72:29:49:5f:21:
                    63:a0:5c:b6:7f:21:b6:86:ed:b1:8c:68:67:cb:59:
                    45:23:a2:47:ca:60:5d:4f:74:31:89:d1:12:7e:21:
                    5c:77:7d:de:e1:fa:2b:c7:aa:61:9e:0f:c7:ee:3f:
                    56:c4:6c:da:1f:be:a9:1a:e0:ab:1a:66:e9:a8:ab:
                    bf:fb:31:6c:00:9e:2f:a3:8c:13:8e:7b:ad:68:d6:
                    7e:3c:6a:8c:5f:25:7e:cd:e0:95:4c:0b:08:d8:ad:
                    73:50:e4:ca:1c:fe:bd:be:75:f2:b4:4e:08:ab:f8:
                    18:9b:0a:19:e0:92:1a:0d:19:4b:7c:83:d1:fc:86:
                    71:e9:db:c9:bf:95:94:3b:65:a1:ec:41:01:be:1b:
                    9e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DF:C4:5C:31:70:8A:F5:08:68:1D:54:B4:6A:16:48:08:ED:B7:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3a58a272-1567-32bf-93ef-107d75898430.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.125.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:9b:4d:b6:db:e7:d8:d9:fb:eb:56:7a:2a:81:1c:ca:ad:1b:
         00:92:d3:1e:e0:d9:07:d6:09:68:d6:f1:af:fe:28:b2:86:79:
         07:20:3a:6d:8d:80:61:10:99:75:12:db:d0:a0:19:48:eb:25:
         51:40:45:10:23:10:6d:f8:7f:4e:b6:67:b3:ba:83:89:7d:94:
         aa:f1:b2:79:9a:82:44:a1:5c:bb:93:c9:96:7c:cd:08:2c:75:
         62:6c:21:12:e5:d3:43:68:86:f3:89:58:19:6a:cb:15:74:75:
         41:05:b6:58:7d:56:38:55:3b:c5:f2:fa:c3:f2:29:d2:75:b1:
         10:30:5c:8f:68:17:e8:5a:26:e6:6f:a0:25:74:83:b2:7b:46:
         e2:37:2a:0f:d9:6b:58:8b:ac:67:63:97:5e:c1:a2:9a:32:e2:
         d8:83:b8:8f:98:15:3a:72:17:6f:64:7c:0a:9f:a0:d6:07:d6:
         dd:d6:dc:47:fb:fe:c9:80:b8:fc:69:ea:cf:87:0e:28:3f:cf:
         87:01:79:5d:58:76:f3:80:de:71:7b:4c:a6:b2:2c:e8:e0:fd:
         d5:4c:af:0e:a6:73:dd:66:1d:49:de:e9:1b:fe:76:20:1d:43:
         f5:86:22:4e:27:33:cf:4d:b4:03:2c:b2:38:ae:93:b7:a7:87:
         40:90:fc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:17:50 2025 by rpki-client